{"id":195,"date":"2026-03-21T13:23:27","date_gmt":"2026-03-21T13:23:27","guid":{"rendered":"https:\/\/happypuppies.nl\/?page_id=195"},"modified":"2026-10-27T21:58:00","modified_gmt":"2026-10-27T21:58:00","slug":"data-processing-agreement","status":"publish","type":"page","link":"https:\/\/happypuppies.nl\/en\/verwerkersovereenkomst\/","title":{"rendered":"Data Processing Agreement"},"content":{"rendered":"<section class=\"policy-hero\">\n<div class=\"container\">\n<div class=\"policy-hero-inner\">\n<p class=\"policy-label\">Legal \u00b7 GDPR \u00b7 Data Processing<\/p>\n<h1>Data Processing Agreement<\/h1>\n<div class=\"policy-meta\">\n        <span class=\"policy-meta-item\">\ud83d\udcc5 Version: October 2026<\/span>\n      <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>\n<section class=\"policy-body-section\">\n<div class=\"container\">\n<div class=\"policy-content\">\n<div class=\"policy-block\" id=\"introduction\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\udccc<\/div>\n<h2>Introduction<\/h2>\n<\/p><\/div>\n<p>This Data Processing Agreement (DPA) describes how Happy Puppies, as data controller, processes personal data and works with its data processors. It sets out the technical and organisational measures in place to protect personal data processed in connection with our dog care services.<\/p>\n<p>This agreement is intended for clients and website visitors whose data we process and meets the requirements of Art. 28 GDPR.<\/p>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"general\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83c\udfe2<\/div>\n<h2>1. General Information<\/h2>\n<\/p><\/div>\n<ul class=\"policy-contact-list\">\n<li>\ud83d\udc64 <strong>Controller:<\/strong> Camila de Diago, Happy Puppies<\/li>\n<li>\ud83d\udccd <strong>Address:<\/strong> Loosduinseweg 65H, 2571 AA The Hague, Netherlands<\/li>\n<li>\ud83c\udfdb\ufe0f <strong>KvK number:<\/strong> 93920881<\/li>\n<li>\ud83d\udce7 <strong>Data Protection Officer:<\/strong> <a href=\"mailto:dpo@happypuppies.nl\">dpo@happypuppies.nl<\/a><\/li>\n<li>\ud83d\udcde <strong>Phone:<\/strong> +31 6 34698983<\/li>\n<li>\ud83c\udf10 <strong>Website:<\/strong> <a href=\"\/en\/\">happypuppies.nl<\/a><\/li>\n<li>\ud83d\udcc5 <strong>Valid from:<\/strong> March 2026<\/li>\n<\/ul>\n<p>We regularly review and update our security measures. Changes to this agreement will be communicated via our website.<\/p>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"services\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\udee0\ufe0f<\/div>\n<h2>2. Which Services Does This Cover?<\/h2>\n<\/p><\/div>\n<p>This agreement applies to the following services offered by Happy Puppies:<\/p>\n<ul class=\"policy-list\">\n<li>Dog boarding: overnight stays at our home in The Hague<\/li>\n<li>Dog daycare: day supervision during working hours<\/li>\n<li>Dog walking: structured walks in and around The Hague Centre<\/li>\n<li>Puppy care: support and socialisation for young dogs<\/li>\n<\/ul><\/div>\n<div class=\"policy-block\" id=\"what-we-do\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\u2699\ufe0f<\/div>\n<h2>3. What Do We Process Exactly?<\/h2>\n<\/p><\/div>\n<p>In connection with our services, we process the following personal data:<\/p>\n<ul class=\"policy-list\">\n<li>Owner contact details (name, email, phone number)<\/li>\n<li>Dog information (name, breed, age, vaccination status, health notes)<\/li>\n<li>Booking information (dates, service type, special instructions)<\/li>\n<li>Payment information (processed via our bank and invoicing tools, we do not store full card details)<\/li>\n<li>Website usage data (via server logs and cookieless, anonymised visitor statistics)<\/li>\n<li>Live chat correspondence (via Crisp)<\/li>\n<\/ul>\n<div class=\"policy-alert\">\n          <span class=\"policy-alert-icon\">\u2139\ufe0f<\/span><br \/>\n          <span>We only process the data strictly necessary to deliver our services safely and correctly. We do not process special categories of personal data (Art. 9 GDPR) unless a dog's health needs make this necessary for their care.<\/span>\n        <\/div>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"storage\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83c\udf0d<\/div>\n<h2>4. Where Is Your Data Stored?<\/h2>\n<\/p><\/div>\n<p>All data processing takes place within the EU\/EEA, with the following exception:<\/p>\n<div class=\"policy-table-wrapper\">\n<table class=\"policy-table\">\n<thead>\n<tr>\n<th>Processing<\/th>\n<th>Location<\/th>\n<th>Legal basis for transfer<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Website security, CDN &amp; bot\/spam protection (Turnstile)<\/td>\n<td><span class=\"badge-us\">\ud83c\uddfa\ud83c\uddf8 United States (Cloudflare)<\/span><\/td>\n<td>Standard Contractual Clauses (SCCs, Art. 46 GDPR)<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"sub-processors\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\udd17<\/div>\n<h2>5. Who Do We Work With? (Sub-processors)<\/h2>\n<\/p><\/div>\n<p>We work with the following parties for our operations:<\/p>\n<div class=\"policy-table-wrapper\">\n<table class=\"policy-table\">\n<thead>\n<tr>\n<th>Provider<\/th>\n<th>Service<\/th>\n<th>Location<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Hostinger<\/strong><\/td>\n<td>Web hosting, server infrastructure &amp; email delivery<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands (EU)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Yuvo<\/strong><\/td>\n<td>WordPress maintenance &amp; backups (WP Umbrella, NinjaFirewall, NinjaScanner)<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>WP Umbrella<\/strong><\/td>\n<td>WordPress backup management, monitoring &amp; automated backups<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddeb\ud83c\uddf7 France (EU)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Knab<\/strong><\/td>\n<td>Banking services<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Jortt<\/strong><\/td>\n<td>Financial administration &amp; invoicing<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>FluentForms<\/strong><\/td>\n<td>Contact &amp; service request forms<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddea\ud83c\uddfa EU<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Crisp<\/strong><\/td>\n<td>Live chat &amp; customer support (full privacy mode: no tracking or analytics cookies, no visitor tracking)<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddeb\ud83c\uddf7 France (EU)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Burst Statistics<\/strong><\/td>\n<td>Cookieless, anonymised visitor statistics; runs on our own server (no external data sharing)<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands (server)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>TranslatePress<\/strong><\/td>\n<td>Multilingual website (NL\/EN), runs on our own server; no data is shared with third parties for manual translations<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands (server)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>WP Rocket<\/strong><\/td>\n<td>Website performance &amp; caching (page cache on our own server)<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands (server)<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>NinjaFirewall<\/strong><\/td>\n<td>Website firewall &amp; security<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddea\ud83c\uddfa EU<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>NinjaScanner<\/strong><\/td>\n<td>Malware &amp; virus scanning<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddea\ud83c\uddfa EU<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Complianz<\/strong><\/td>\n<td>Cookie compliance (no cookie banner is shown, because we place no cookies that require consent)<\/td>\n<td><span class=\"badge-eu\">\ud83c\uddf3\ud83c\uddf1 Netherlands<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Cloudflare<\/strong><\/td>\n<td>Website security, CDN &amp; bot\/spam protection (Turnstile)<\/td>\n<td><span class=\"badge-us\">\ud83c\uddfa\ud83c\uddf8 United States (SCCs)<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<h3 class=\"policy-subheading\">Where our sub-processors process data<\/h3>\n<p>All parties have committed to processing data only within the EU\/EEA or in countries with adequate protection. For transfers to the United States (Cloudflare), Standard Contractual Clauses (SCCs) apply in accordance with Art. 46 GDPR.<\/p>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"security\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\udd12<\/div>\n<h2>6. How Do We Secure Your Data?<\/h2>\n<\/p><\/div>\n<div class=\"policy-security-grid\">\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udd12<\/span><\/p>\n<div><strong>Transit encryption<\/strong><span>TLS\/SSL for all data in transit<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udcbe<\/span><\/p>\n<div><strong>Backup encryption<\/strong><span>WP Umbrella: automated backups managed by Yuvo<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udee1\ufe0f<\/span><\/p>\n<div><strong>Website security<\/strong><span>NinjaFirewall &amp; NinjaScanner: firewall and malware scanning (via Yuvo)<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\u2709\ufe0f<\/span><\/p>\n<div><strong>Email security<\/strong><span>DKIM, SPF and DMARC against phishing and spoofing<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udd10<\/span><\/p>\n<div><strong>Access control<\/strong><span>Two-factor authentication where possible, strict access rights<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udd0d<\/span><\/p>\n<div><strong>Monitoring<\/strong><span>Regular security scans of the WordPress site<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83d\udd04<\/span><\/p>\n<div><strong>Updates<\/strong><span>Regular patches for WordPress core, themes and plugins<\/span><\/div>\n<\/div>\n<div class=\"policy-security-item\"><span class=\"policy-security-icon\">\ud83c\udfe0<\/span><\/p>\n<div><strong>Physical security<\/strong><span>Dog data and booking records stored on password-protected, encrypted devices<\/span><\/div>\n<\/div><\/div>\n<p>We have no structural access to data beyond what is necessary to deliver our services. We only access client data when explicitly required for service delivery or support.<\/p>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"rights\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\u2705<\/div>\n<h2>7. Rights of Data Subjects<\/h2>\n<\/p><\/div>\n<p>We honour all GDPR data subject rights. Requests for access, correction, or deletion of personal data can be submitted as described in our <a href=\"\/en\/privacy-policy\/\">Privacy Policy<\/a>.<\/p>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"retention\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\uddd3\ufe0f<\/div>\n<h2>8. Retention &amp; Deletion<\/h2>\n<\/p><\/div>\n<p>When the relationship with a client ends:<\/p>\n<div class=\"policy-table-wrapper\">\n<table class=\"policy-table\">\n<thead>\n<tr>\n<th>Timeline<\/th>\n<th>Action<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Immediately<\/strong><\/td>\n<td>Booking access and login credentials are revoked<\/td>\n<\/tr>\n<tr>\n<td><strong>Within 6 months<\/strong><\/td>\n<td>All personal data is irreversibly deleted, unless longer retention is required by law<\/td>\n<\/tr>\n<tr>\n<td><strong>Financial records<\/strong><\/td>\n<td>Retained for 7 years to comply with Dutch tax law (legal obligation)<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"data-breach\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\ud83d\udea8<\/div>\n<h2>9. What Do We Do in Case of a Data Breach?<\/h2>\n<\/p><\/div>\n<div class=\"policy-alert\">\n          <span class=\"policy-alert-icon\">\u2139\ufe0f<\/span><br \/>\n          <span><strong>What is a data breach?<\/strong> A security incident in which personal data is accidentally or unlawfully destroyed, lost, altered, or accessed without authorisation.<\/span>\n        <\/div>\n<div class=\"policy-table-wrapper\">\n<table class=\"policy-table\">\n<thead>\n<tr>\n<th>Aspect<\/th>\n<th>Description<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Notification<\/strong><\/td>\n<td>In the event of a breach affecting client data, we notify the affected party within 24 hours of discovery.<\/td>\n<\/tr>\n<tr>\n<td><strong>Regulatory reporting<\/strong><\/td>\n<td>Where required under GDPR, we report to the Dutch Data Protection Authority within 72 hours.<\/td>\n<\/tr>\n<tr>\n<td><strong>Our response<\/strong><\/td>\n<td>We document the incident, contain it immediately (e.g. restore from backup, apply security patch), and inform affected parties of the scope and actions taken.<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<div class=\"policy-block\" id=\"legal\">\n<div class=\"policy-block-header\">\n<div class=\"policy-block-icon\">\u2696\ufe0f<\/div>\n<h2>10. Legal Framework<\/h2>\n<\/p><\/div>\n<p>This Data Processing Agreement is governed by Dutch law and complies with Article 28 of the GDPR. Any disputes arising from this agreement will be submitted to the competent court in The Hague.<\/p>\n<p>Questions? Contact our Data Protection Officer at <a href=\"mailto:dpo@happypuppies.nl\">dpo@happypuppies.nl<\/a>.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Juridisch \u00b7 AVG \u00b7 Gegevensverwerking Verwerkersovereenkomst \ud83d\udcc5 Versie: oktober 2026 \ud83d\udccc Inleiding Deze Verwerkersovereenkomst (VOK) beschrijft hoe Happy Puppies, als verwerkingsverantwoordelijke, persoonsgegevens verwerkt en samenwerkt met zijn verwerkers. De overeenkomst beschrijft de technische en organisatorische maatregelen die zijn getroffen om persoonsgegevens te beschermen die worden verwerkt in het kader van onze hondenopvangdiensten. Deze overeenkomst is [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-195","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/pages\/195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/comments?post=195"}],"version-history":[{"count":6,"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/pages\/195\/revisions"}],"predecessor-version":[{"id":761,"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/pages\/195\/revisions\/761"}],"wp:attachment":[{"href":"https:\/\/happypuppies.nl\/en\/wp-json\/wp\/v2\/media?parent=195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}